Gemalto CEO: HCE Not Secure for EMV Payments Unless Tokens Stored on Secure Elements or TEE

France-based vendor Gemalto Thursday confirmed its growth projections for 2014 and its longer-term forecast for 2017, despite the recent announcements of support for host-card emulation by Visa and MasterCard Worldwide.

Gemalto, the world’s largest smart card supplier and also the largest trusted service manager, has much to lose if pure host-card emulation, or HCE, takes off. It would enable banks and other service providers to avoid putting their applications on NFC SIMs, like the ones Gemalto supplies by the millions to mobile operators; or to require the hiring of a TSM to manage those applets over the air on the SIMs or other secure elements. 

Gemalto CEO Olivier Piou, while he questioned the inherent security of HCE for EMV payments, sought to put a positive face on the growing interest in the technology, in comments to financial analysts Thursday, following release of the company’s fourth quarter and year-end results. 

Among other things, HCE represents an endorsement of NFC by “all the main players of this ecosystem” for NFC, including Visa, MasterCard and Google, said Piou, who added that HCE would add momentum to the deployment of contactless point-of-sale terminals by merchants. In addition, he acknowledged that HCE enables easier development of applications for use with NFC phones, compared with secure elements. 

Some major telcos, including the Isis joint venture, have been using similar talking points, especially since Visa and MasterCard made their HCE announcements Feb. 19. 

But Piou, like the mobile operators, is taking a position on security that doesn’t quite match that of Visa and MasterCard or to jibe with the strict definition of HCE. Gemalto and the telcos are arguing that HCE is suited for such low-security applications as loyalty and couponing, not for open-loop payment. 

In this article: 

Words

3,500 

Among Topics Covered:

  • Gemalto CEO’s Olivier Piou’s contention that EMV tokens for HCE can't be secure in phone memory
  • Position of Visa and MasterCard on security of tokens and HCE
  • Piou: Decision on HCE security belongs to banks
  • Gemalto’s year-end revenue and profit report and multiyear goals
  • Review of hybrid approach to putting tokens on secure elements for cloud-based NFC payments
  • Oberthur’s take on HCE security
  • Isis’ view of HCE
  • Piou’s comments on Gemalto’s MCX contract and response to question about role vis-à-vis Paydiant 

Sources Quoted: 

Olivier Piou, CEO, Gemalto
Cédric Collomb, managing director, telecom, Oberthur Technologies
Scott Mulloy, CTO, Isis
Jorn Lambert, group executive, digital convergence, MasterCard 

Among companies and organizations mentioned:

Gemalto
Visa
MasterCard
Isis
Oberthur
MCX
Paydiant 

This is premium content from NFC Times.

Read Full Article 

© NFC Times and Forthwrite Media. NFC Times content cannot be copied or distributed without the express permission of the publisher.

HEADLINE NEWS

Budding MaaS App Hits Milestone for Public Transit Tickets but Share of Total Rides Still Low

NFC TIMES Exclusive Insight – U.S.-based trip-planning app Transit announced it has enabled 500,000 rides from its app for a group of 13 small to mid-tier transit agencies based in the state of Ohio, though mobile ticketing still makes up a small percentage of total rides provided by the agencies.

Insight: Apple Pay Launch of Virtual Closed-Loop Virtual Clipper Card Follows Emerging Trend

NFC Times Exclusive Insight – Although the trend for transit agencies to support open-loop fare payments, including with Apple Pay, Google Pay and other Pays wallets, has continued unabated–even accelerated–during the pandemic, another trend is taking shape: That of agencies adding virtual versions of their closed-loop fare cards into the Pays wallets.

First Transit Agency to Sell Tickets Through Uber App Sees Relatively Few Takers Two Years on

Apr 21 2021

NFC TIMES Exclusive Insight – The Regional Transportation District of Denver was the first transit agency to work with Uber to sell its bus and light rail tickets through the Uber app in the spring of 2019. RTD later that year expanded the service to trip-planning app Transit and then last fall to the app for another ride-hailing service, Lyft.

Sydney to Test Multimodal Payments Involving Private Mobility Providers Using Digital Closed-Loop Card

NFC Times Exclusive Insight – A trial to be held later this year in Australia’s largest city, Sydney, if it proves successful, could offer one example for how agencies can encourage customers to take multimodal transport combining public and private operators. The economics behind the New South Wales government’s trial offer are unclear, however.

Rome Transit Operator: Covid Accelerates Demand for Contactless Payments but Customer Habits Hard to Change

NFC TIMES Exclusive Insight – The CIO of Italy’s largest public transit operator, ATAC SpA, said the Covid-19 pandemic has accelerated demand for open-loop contactless and mobile payments, but added that old habits are hard to break for customers and use of cash and paper tickets are still popular.

Dubai Transit Authority Plans to Launch Its Closed-Loop Card in More NFC Wallets

NFC TIMES Exclusive Insight – Dubai’s Roads and Transport Authority, or RTA, which in December first launched mobile fare payments with a digital version of its closed-loop card in Huawei smartphones, says it plans to expand the service to other OEMs, including Apple and Samsung.

Case Study: Transit Agency in Portugal Combined NFC with BLE for Mobile Ticketing; Faced Challenges

NFC TIMES Exclusive Insight – The agency that runs ticketing for 19 public bus, tram and train operators serving Porto, Portugal’s second largest city, says it has had success–and faced several challenges–with the rollout of its Anda mobile-ticketing app.

OMNY Hits New Usage Milestone as Open-Loop Payments Rollout Continues

NFC TIMES Exclusive Insight – New York’s Metropolitan Transportation Authority, or MTA, says it continues to see steady growth of its open-loop fare payments service, OMNY, announcing 50 million taps by customers using NFC wallets and bank cards to ride the massive New York City Subway and the city’s buses.

In-Depth: Contactless Open-Loop Pilot in Spain First Project from Vendor Partnership

Mar 11 2021

NFC TIMES Exclusive Insight – Bilbobus, which operates bus service for the city of Bilbao, in northern Spain’s Basque region, says it launched its recent trial of con

Moscow Metro Plans Rollout of ‘Face Pay’ Technology for Fare Collection

NFC TIMES Exclusive Insight – The Moscow Metro plans to roll out facial-recognition technology at every station by the end of 2021 to enable customers to pay fares, officials say. The project, while delayed, would be the largest of its kind globally.

Stockholm Transit Agency Launches Open-Loop Fare Payments for Multimodal Rides

NFC TIMES Exclusive Insight – Stockholm Public Transport, or SL, the city-owned company that oversees major public transport in the city, is the latest agency in Europe to launch open-loop fare collection, offering multimodal rides with a tap of a contactless EMV bank card or NFC device.

Case Study: Amsterdam Transit Operator Seeks to Go Nearly 100% Digital for Ticketing to Cut Costs and Enhance Service

NFC TIMES Exclusive Insight – GVB, Amsterdam’s largest public transit operator, says it seeks to replace an aging closed-loop fare card system and go to open-loop and other digital tokens with the planned rollout of its new account-based ticketing system.